This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
File:                     Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json)
Hash identifier:          MxpAF3Pa8AxsM2CmJpToO4KR8q3A8epzJedCFyJTM54=
Subject key identifier:   25:70:8C:A9:E9:C7:BC:D6:B2:90:2E:99:50:BD:1B:34:5C:FC:38:A3
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
Manifest number:          0670
Signing time:             Sat 24 Jan 2026 21:51:01 +0000
Manifest this update:     Sat 24 Jan 2026 21:51:01 +0000
Manifest next update:     Sat 31 Jan 2026 21:51:01 +0000
Files and hashes:         1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: 2BuLo9/KI1nePasJ16MAQVll49j52+5+8TxeMXO08AU=)
                          2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: T0wdRehMbf/c1n+Lvi9w5jCq5pwGOxzzrXN8PvqF9IU=)
                          3: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: jjYMFpQBMoseoddvz1xiuozNsn+9+akhZ3LH2vRoBv4=)
                          4: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: t0PgB3trny3UGBtbQPXZ2oEACZpm7wPfgQYguo35iOE=)
                          5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Jan 24 21:51:01 2026 GMT
            Not After : Jan 31 21:51:01 2026 GMT
        Subject: CN=69753ec5-37fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:de:c8:d7:97:2f:ce:c4:9e:61:be:06:42:
                    d4:6a:43:3e:72:97:7e:9c:03:91:90:49:bf:70:e2:
                    02:ba:e7:9d:78:be:56:1f:b4:85:59:ca:5d:45:c9:
                    26:7f:17:51:06:95:44:ee:91:61:cf:81:bc:9e:bb:
                    65:75:b8:4e:fc:1b:b5:d7:e0:43:72:f2:70:bc:c8:
                    6c:b1:74:d8:22:87:37:ac:03:4e:7a:89:97:f9:1e:
                    42:ad:8e:fb:ba:14:7b:74:cc:3c:8c:3b:a0:61:93:
                    61:93:b1:1e:4a:58:4d:bb:32:ac:6c:aa:d4:4d:0c:
                    ce:f7:80:6d:2c:c8:6b:3f:7f:9c:a6:37:ff:e0:b0:
                    28:d0:92:cd:98:b0:3c:c8:8e:45:14:6c:4e:39:fa:
                    92:07:e3:51:50:53:a2:35:15:95:98:a1:f4:a0:cc:
                    de:18:6c:65:02:e2:9a:0e:1f:5b:9e:a5:40:91:9c:
                    b5:f6:99:6d:d4:af:65:23:91:97:05:c7:66:b1:71:
                    cb:25:49:62:59:ef:04:07:09:8e:2f:49:88:83:29:
                    d5:17:2f:cf:d4:af:71:47:a6:84:39:ea:07:6b:41:
                    19:28:62:1d:16:87:ee:06:2f:d2:26:b5:dc:7b:97:
                    2b:86:45:11:39:af:3a:3f:87:b7:b2:d4:78:27:22:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:70:8C:A9:E9:C7:BC:D6:B2:90:2E:99:50:BD:1B:34:5C:FC:38:A3
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:87:39:5c:d2:ba:02:83:da:07:d4:01:da:36:6d:61:9f:
         68:ba:51:79:a6:dc:0f:8b:9f:a4:06:84:b8:7c:13:77:67:60:
         6b:4f:83:91:24:ce:2e:21:7e:f9:3a:cf:2a:fc:18:5d:d0:16:
         83:dd:57:88:f2:64:84:03:37:91:a2:db:23:9b:83:53:fc:81:
         18:25:09:0c:35:9d:fe:0f:27:25:cf:f7:cf:af:44:dd:a9:8d:
         17:b3:6a:b9:97:82:1a:a0:83:5f:e1:81:1f:a8:ab:db:12:db:
         c0:3d:f0:42:fa:67:ce:83:1a:c7:d8:52:31:66:31:35:3e:01:
         7c:ad:0f:32:89:2b:78:f6:bb:d1:27:09:0f:58:db:06:1a:92:
         51:e3:de:02:66:34:91:c9:06:96:f7:b9:00:b9:de:83:40:e3:
         43:25:0d:3d:f5:07:a1:72:48:7a:90:fd:36:0a:d1:ac:c3:35:
         b2:85:b8:49:1a:7d:cf:60:33:54:81:e0:78:73:e0:56:e7:67:
         fd:a5:08:da:04:11:5e:e2:9e:73:1f:f0:1c:01:d2:22:91:68:
         76:6c:9e:ee:57:07:6d:13:7e:58:2b:8e:89:d3:9f:32:f3:d3:
         9f:af:6a:8c:0f:67:96:f1:cb:77:fd:aa:91:82:50:08:90:c7:
         ca:67:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:45 2026 by rpki-client